AbuseWith.Us data breach: 1.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2017-10-09
In 2016, the site dedicated to helping people hack email and online gaming accounts known as Abusewith.us suffered multiple data breaches. The site allegedly had an administrator in common with the nefarious LeakedSource site, both of which have since been shut down. The exposed data included more than 1.3 million unique email addresses, often accompanied by usernames, IP addresses and plain text or hashed passwords retrieved from various sources and intended to be used to compromise the victims' accounts. Exposed data: email addresses, ip addresses, passwords, usernames. The breach dates from Jul 1, 2016; Have I Been Pwned loaded it on Oct 9, 2017.
What to do
- If you had a AbuseWith.Us account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
